Behavioral task
behavioral1
Sample
a7c34e4cbb193fbc66920adbd36eb9ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a7c34e4cbb193fbc66920adbd36eb9ae.exe
Resource
win10v2004-20231215-en
General
-
Target
a7c34e4cbb193fbc66920adbd36eb9ae
-
Size
6.0MB
-
MD5
a7c34e4cbb193fbc66920adbd36eb9ae
-
SHA1
e08fed399f69af8288fa2066bf717e881e536366
-
SHA256
9f0f46459eebbac8b7e0ef3128399444ce2d0cadcdf1500b43bf0a7e49a1acd2
-
SHA512
dc0a8ffd8243933bc29d43312968581045c4d06e05e4d0f11ae2acaf9e67afd8e9356a201e3366a0952d32d728205919e5e9881aaaa5b16953f18ffa27772e42
-
SSDEEP
98304:EiZWoUbPkGdV0SzXcak9i7GiJacakWSQgGZTtSjOuHcak9i7GiJacakMVBBI0xxN:jgzzkK0UdTudtzxkjVHdTudlPhcPSdTp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7c34e4cbb193fbc66920adbd36eb9ae
Files
-
a7c34e4cbb193fbc66920adbd36eb9ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE